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(54) Method of distributing software 



(57) One of a plurality of users purchases a PC card 
in which software is included from a distributor of com- 
munication software or a seller of PC cards. This pur- 
chaser informs a non-purchaser through a safe channel 
such as off-line of a key for encryption, a URL of the site 
from which to download the software and a retrieval in- 
duction code. The non-purchaser accesses the distrib- 
utor of communication software, etc., via a network us- 



ing the URL, key and retrieval induction code, down- 
loads the software corresponding to the software that 
the purchaser owns, and executes cipher communica- 
tions or a competition game with the purchaser. The dis- 
tributor of software or the seller of PC cards pays the 
purchaser who satisfies certain conditions based upon 
the contents registered in the user management data- 
base. 
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Description 

[0001] This invention relates to a method of distribut- 
ing software such as encrypting software. 
[0002] The present description relates mainly to a s 
method of distributing encrypting software, but this 
method can also be applied to other software. 
[0003] In a conventional method of distributing or us- 
ing encrypting software, when a user encrypts a file us- 
ing encrypting software and communicates with the oth- 10 
er party using a file attached to communication software, 
the other party who has not yet purchased the same . 
software and who receives the encrypted file has to de- 
crypt it using one of the following conventional methods. 

15 

1 . The user has the other party purchase the same 
software, and both parties share a cipher key and 
information for making the key. 

2. Both parties share a cipher key and information 

for making the key by inputting a specified URL and 20 
downloading decrypting software on the Web. 

3. The user sends dedicated decrypting software 
that already includes a common key and self-de- 
crypting software to the other party as an attached 
file. 25 

[0004] In the case of item 1 of the above paragraph, 
a user has to purchase encrypting software only once, 
but whenever the user changes the other party with 
whom one communicates, the user has to determine in- 30 
formation about the mutual cipher with a new party, thus 
making it possible to use the cipher without authority by 
copying it. 

[0005] In the case of item 2 above, the user has to 
purchase encrypting software only once, but the suppli- 35 
er of said software sometimes supplies, free of charge, 
said software whose functionality has been deteriorat- 
ed. In this case, whenever the user changes the other 
party with whom the user communicates, the user has 
to determine information about the mutual cipher with a 40 
new party, thus making it possible to use the cipher with- 
out authority by copying it. 

[0006] In the case of item 3 above, the user can pro- 
vide the other party, free of charge, with software dedi- 
cated for decrypting, buttheotherpartycannotsenden- 45 
crypted data. If this is the case, a corporation that pro- 
vides a cipher communication service cannot earn any 
income except where users purchase encrypting soft- 
ware, regardless of which method mentioned above is 
adopted. Therefore, there is such a problem that the cor- so 
poration that provides a cipher communication service 
cannot earn any reward from the service of encrypting 
a file and sending it safely to the other party. 
[0007] Also, in the case of other software, a corpora- 
tion that provides encrypting software cannot earn any ss 
income except where users purchase the software. 
[0008] An aim of the invention is to enable software 
to be distributed safely, to enable a corporation to earn 



a reward for the service ensuring the safety of the use 
of the software, and to provide a method for promoting 
the spread of the software among a large n umber of cus- 
tomers. 

[0009] The method for distributing software in the 
mode for implementing the invention is a method in 
which a first user who licenses the software to a second 
user distributes the software required for the processing 
to a second user, and the above-mentioned method is 
characterized in that it is provided with both the first step 
for distributing said software to a first user together with 
at least a code that identifies said software and the sec- 
ond step for distributing to a second user the same soft- 
ware as said software that is identified by the code of 
which the first user informs the second user. 
[001 0] If this invention is used, the first user can safely 
communicate with only the second user with whom the 
first user wants to communicate. In other words, no one 
other than the first and second users can intercept the 
communication taking place between the first user and 
the second user. Therefore, it is possible to communi- 
cate in with a high degree of secrecy by using the soft- 
ware distributed in such a manner as mentioned above. 
[0011] In particular, it is possible to communicate far 
more safely by applying the method of this invention to 
cipher communications. Since software can be safely 
distributed, this promotes the use of the software distri- 
bution method of this invention and acquires the confi- 
dence of the users, thus causing the use of the method 
of this invention to be further promoted. In addition, an 
even more beneficial system can be provided by paying 
some amount of money to the users of the mode for re- 
alizing this invention. 

[0012] The invention also provides a computer pro- 
gram and a computer program product for carrying out 
any of the methods described herein, and a computer 
readable medium having stored thereon a program for 
carrying out any of the methods described herein. 
[001 3] Preferred features of the present invention will 
now be described, purely by way of example, with ref- 
erence to the accompanying drawings, in which:- 

Fig. 1 is a diagram showing a general processing 
sequence of an embodiment of this invention. 
Fig. 2 is a diagram showing the processing se- 
quence of communications performed between a 
user A who has purchased a PC card (hereinafter 
called purchaser A) and a user B who has not pur- 
chased a PC card (hereinafter called non-purchas- 
er B). 

Fig. 3 is a diagram showing cipher communications 
performed between non-purchasers. 
Fig. 4 is a diagram showing cipher communications 
performed between a non-purchaser and a plurality 
of purchasers. 

Fig. 5 is a diagram showing another configuration 
used for cipher communications performed be- 
tween a non-purchaser and a plurality of purchas- 
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ers. 

Fig. 6 Is a diagram showing the method for using 
software for signature and certification. 
Fig. 7 is a diagram showing the method for distrib- 
uting software for competition games. 
Fig. 8 is a diagram showing the processing se- 
quence of the mode for implementing the invention 
and access to a database (No. 1). 
Fig. 9 is a diagram showing the processing se- 
quence of the mode for implementing the invention 
and access to a database (No. 2). 
Fig. 10 is a diagram showing the processing se- 
quence of the mode for implementing the invention 
and the access to a database (No. 3). 
Fig. 11 is a diagram showing the sequence in which 
a user purchases a hardware module from a seller 
who sells and manages PC cards. 
Fig. 1 2 is a diagram showing the procedure for start- 
ing communications (No. 1). 
Fig. 1 3 is a diagram showing the procedure for start- 
ing communications (No. 2). 
Fig. 1 4 is a diagram showing the procedure for sup- 
plementing a retrieval induction code. 
Fig. 15 is a diagram showing the certification proc- 
ess at the time a purchaser transmits data to a non- 
purchaser. 

Fig. 16 is a diagram showing the certification proc- 
ess at the time a non-purchaser transmits data to a 
purchaser. 

Fig. 17 is a diagram showing the certification proc- 
ess at the time a non-purchaser C transmits data to 
a non-purchaser B. 

Fig. 18 is a diagram showing the certification proc- 
ess at the time communications are performed be- 
tween both parties who have purchased a PC card. 
Fig. 1 9 is a diagram showing a summary of the cer- 
tification of encrypted data. 
Fig. 20 is a diagram showing the method for making 
and using a secret key (No. 1). 
Fig. 21 is a diagram showing the method for making 
and using a secret key (No. 2). 
Fig. 22 is a diagram showing the method for making 
and using a secret key (No. 3). 
Fig. 23 is a diagram showing the method for making 
and using a secret key (No. 4). 
Fig. 24 is a diagram showing the method for making 
and using a secret key (No. 5). 
Fig. 25 is a diagram showing the method for making 
and using a secret key (No. 6). 
Fig. 26 is a flowchart showing the processing se- 
quence at the time when a non-purchaser down- 
loads dedicated software. 

Fig. 27 is a flowchart showing the process in which 
a purchaser charges a retrieval induction code to a 
PC card. 

[0014] When a purchaser who has purchased a PC 
card which stores software wants to safely communi- 



cate with a non-purchaser who has not purchased it, this 
invention makes it possible to obtain dedicated software 
by handing the retrieval induction code attached to the 
PC card and the URL of a person who supplies the soft- 
s ware to another person. The retrieval induction card is 
purchased from the person who supplies the software 
and is thereby supplemented. 

[0015] Fig. 1 is a diagram showing a general process- 
ing sequence of the mode for implementing the inven- 
10 tion. 

[0016] First, a user purchases a PC card in step 1). 
Though it is stated here that a user purchases a PC card, 
he also purchases formail software, a retrieval induction 
code and a URL in addition to the PC card. 

15 [0017] Then, the user contacts a non-purchaser in 
step 2). At that time the user who has purchased a re- 
trieval induction code and a URL informs the non-pur- 
chaser of the retrieval induction code and the URL. 
Since sellers of the retrieval induction code sell it as a 

so table in the form of seal, the purchaser can peel off the 
seal and hand the retrieval induction code over to the 
non-purchaser. When the n on -purchaser has received 
the retrieval induction code, he can obtain dedicated for- 
mail software corresponding to the retrieval induction 

25 code. As the method for obtaining dedicated formail 
software, there is, for example, a method for download- 
ing from the URL that the non-purchaser has received 
from the purchaser. Also, the purchaser presents a dif- 
ferent retrieval induction code to each non-purchaser. A 

30 software provider constructs a server in such a way that 
even if the purchaser hands the same retrieval induction 
code to a plurality of no n -purchasers, only one dedicat- 
ed formail software program for one retrieval induction 
code can be obtained. Therefore, it is only one non-pur- 

35 chaser that has the right to download the formail soft- 
ware that can be downloaded by one retrieval induction 
code. 

[0018] That is, the software is provided to the non-pur- 
chaser by the retrieval induction code in step 3). For ex- 

40 ample, the non-purchaser proceeds to the download 
window using the URL received from the purchaser in 
step 3-1) and inputs the retrieval induction code. Then, 
when the server certifies the non-purchaser by said in- 
put of the retrieval induction code, the non-purchaser 

45 begins to download the dedicated encryption software. 
Note that the server is configured in such a way that 
once a non-purchaser is certified by one retrieval induc- 
tion code, the dedicated encrypting software cannot be 
downloaded by the same retrieval induction code again. 

50 [0019] Next, in step 4), the purchaser and the non- 
purchaser communicate using the dedicated formail 
software for encrypting downloaded by the retrieval in- 
duction code that was provided from the purchaser to 
the non -purchaser. The dedicated formail software is 

55 used with a cipher key that has already been set. Or, a 
cipher key that both the purchaser and the non-purchas- 
er have mutually determined can be used. 
[0020] If the purchaser has completely used the re- 
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trieval induction code because of having performed 
communications with a plurality of non-purchasers, the 
purchaser purchases retrieval induction codes from the 
seller of PC cards. 

[0021] When the non-purchaser purchases a PC 5 
card, etc., from the seller of PC cards because he wants 
to use the same system as that of the purchaser after 
having communicated with the purchaser, the seller 
pays some amount of money back to said purchaser 
who purchased the PC card, etc., sometime ago, be- 10 
cause the number of users has increased due to the in- 
troduction of said non-purchaser by said purchaser. Or, 
the seller pays back the purchasers who purchase a 
large number of retrieval induction codes. 
[0022] In an embodiment of this invention, the pur- is 
chaser of encrypting software including a hardware 
module (a PC card including hardware) transfers the 
right of use of the software including a retrieval induction 
code to the other party (non-purchaser), thus making it 
possible to obtain from said right the dedicated software 20 
that can be used only between the purchaser and the 
non-purchaser. Since a cipher key is determined from a 
retrieval induction code, the purchaser and the non-pur- 
chaser do not need to determine the information about 
the cipher between them in advance. This software can 25 
be used only with the same party, and becomes unus- 
able at a certain fixed time. The software for each indi- 
vidual party with whom the purchaser communicates is 
obtained from a new retrieval induction code. The re- 
trieval induction code whose number has been deter- 30 
mined in advance is set in a hardware module for the 
purchaser who purchases the encrypting software with 
a hardware module, and said code is additionally set in 
the hardware module where a wire is not required. Said 
code is additionally purchased by the purchaser. The 35 
purchaser earns a reward for receiving the service of 
encrypting a file and sending the encrypted file to the 
other party. 

[0023] Fig. 2 is a diagram showing the processing se- 
quence of communications performed between pur- 40 
chaser A and purchaser B. 

[0024] First, purchaser A pays the price of a PC card, 
etc., to the seller who sells and manages PC cards, and 
purchases a hardware module from the seller in steps 
(1 ) and (2). The seiler who sells and manages PC cards 45 
stores user data in a user management database 1 0 in 
order to manage users who have purchased PC cards. 
Said seller earns an income by selling PC cards, etc. 
[0025] Purchaser A purchases the right to use cipher 
communications that uses a hardware module, for use so 
N times, from the seller who sells the right to use cipher 
communications in step (3), while said seller earns an 
income from selling the right to use cipher communica- 
tions in step (4). Then, purchaser A provides off-line 
non-purchaser B with the right to use cipher communi- ss 
cations for use one time, for example, by providing a 
retrieval induction code to the non-purchaser in step (5). 
In steps (6) and (7), non-purchaser B downloads or ob- 



tains off-line the dedicated software for cipher commu- 
nications from a software provider, with a charge or with- 
out a charge, using said right obtained from purchase 
A. Then, purchaser A performs cipher communications 
with non-purchaser Busing this dedicated software for 
cipher communications . The seller who sells and man- 
ages PC cards pays back to purchaser A when a certain 
number of conditions are satisfied. 
[0026] Fig. 3 is a diagram showing cipher communi- 
cations performed between non-purchasers. 
[0027] In the case of this diagram, purchaser A pur- 
chases the right to use cipher communications and 
grants said right to non-purchasers B and C, thereby al- 
lowing both the non-purchasers to execute cipher com- 
munications between them. 

[0028] First, purchaser A who has purchased a PC 
card purchases a hardware module from the seller who 
sells and manages PC cards, and pays for it, as shown 
in steps (1) and (2). Then, purchaser A purchases the 
right to use cipher communications for use N times from 
the seller who sells the right to use cipher communica- 
tions, as shown in steps (3) and (4). Next, purchaser A 
grants off-line said right of use one time to non-purchas- 
er B, as shown in step (5). Non-purchaser B, by using 
said right of use one time, downloads the dedicated soft- 
ware for cipher communications with a charge orwithout 
a charge using said right granted by the distributor of 
the software (contents), or receives off-line the provision 
of the dedicated software, as shown in steps (6) and (7)- 
1 . At that time, in order for non-purchaser B to perform 
cipher communications with non-purchaser C, non-pur- 
chaser B sets the right to copy the dedicated software 
so that non -purchaser C can obtain the same PC card. 
The copy right is set for the code for copying and the 
number of copies. Non-purchaser B transfers this copy 
right off-line to non-purchaser C. In practice, non-pur- 
chaser B provides the code for copying the dedicated 
software to non-purchaser C. Non-purchaser C receives 
the same dedicated software as that purchaser B ob- 
tained from the distributor of the software (contents) 
based upon the code received from non-purchaser B. 
As the method for non-purchaser C to receive the ded- 
icated software, there is a method of downloading the 
dedicated software on-line or a method of receiving the 
dedicated software off-line. Or, non-purchaser C can 
have the dedicated software copied from that of non- 
purchaser B (step (7)-2). 

[0029] In this way, non-purchaser B and non-purchas- 
er C can execute cipher communications by obtaining 
the dedicated software for cipher communications (step 
(8)). On the other hand, the seller who sells and man- 
ages PC cards pays back purchaser A who has pur- 
chased a PC card based upon certain conditions that 
have been fixed in advance, as shown in step (9). 
[0030] The seller who sells and manages PC cards 
manages the users who have purchased PC cards us- 
ing a user management database 1 00 as explained in 
Fig. 2, and earns an income by selling PC cards. The 
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seller who sells the right to use cipher communications 
earns an income by selling said right to purchasers who 
purchase PC cards. 

[0031] The seller who sells the right to use cipher 
communications, the seller who sells and manages PC 5 
cards and the distributor who distributes the software 
(contents) exchange information amongst themselves. 
For instance, between the seller who sells the right to 
use cipher communications and the seller who sells and 
manages PC cards, the former requests the latter to is- 10 
sue said right, and the latter issues said right to the 
former. The seller who sells and manages PC cards re- 
quests the distributor of the software (contents) to make 
and provide the dedicated software. The distributor of 
the software (contents) inquires about said right to the 15 
seller who sells and manages PC cards. 
[0032] Fig. 4 is a diagram showing cipher communi- 
cations performed between a non-purchaser and a plu- 
rality of purchasers. 

[0033] First, PC card users A, B and C purchase hard- 20 
ware modules from the seller who sells and manages 
PC cards, as shown in step 1). A key, Ka and Kb, for 
making a secret key is set in the PC card. A key, Ka, for 
making a secret key is distributed to purchasers A and 
B who have purchased PC cards, and a key, Kb, for mak- 25 
ing a secret key is distributed to purchaser C who has 
purchased a PC card. The same key, Ka, for making a 
secret key is distributed to purchasers A and B by jointly 
purchasing PC cards. Purchasers A, B and C who have 
purchased PC cards purchase said right and an ID 30 
(identification) number corresponding to it from the sell- 
er who sells the right to use cipher communications, as 
shown in step 2). At that time, the purchasers receive 
the ID and a list of said rights or have the right and ID 
set in the PC card. 35 
[0034] Next, purchaser A informs non-purchaser D of 
the right 11 and ID 1 in step 3). In step 4), non-purchaser 
D accesses the distributor of the software (contents) us- 
ing said right and downloads the dedicated software in 
which the key Ka 1 is included, in step 5). Based upon *o 
the above processes, purchaser A and n on -purchaser 
D can perform cipher communications, as shown in step 
6). In step 7), purchaser A informs purchasers B and C 
of the ID number used for cipher communications with 
non-purchaser D so that non-purchaser D can commu- 45 
nicate with the other purchasers. Purchaser B can ob- 
tain the key Ka 1 from the key Ka for making a secret 
key by setting the ID number that is sent by purchaser 
A to the dedicated software for cipher communications, 
so purchaser B can perform cipher communications with so 
non-purchaser D. On the other hand, since purchaser 
C has purchased the dedicated software for cipher com- 
munications in which a different key, Kb, for making a 
secret key from that of purchaser A is set, purchaser C 
cannot obtain the cipher key, Ka 1 , even if he is informed 55 
of the ID number by purchaser A. Therefore, purchaser 
C cannot perform cipher communications with non-pur- 
chaser D. 



[0035] As has been explained above, a plurality of 
specified purchasers who have purchased PC cards 
can safely perform cipher communications with a non- 
purchaser who has not purchased a PC card. Also, the 
above-mentioned cipher key (key for ciphering and 
decihpering) can be made by encrypting an ID number 
using a key for making a secret key. 
[0036] Fig. 5 is a diagram showing another configura- 
tion used for cipher communications performed be- 
tween a non-purchaser and a plurality of purchasers. 
Purchasers A, B and C purchase PC cards in which the 
keys, Ka and Kb, for making a secret key are set by a 
seller who sells and manages PC cards in step 1 ). Note 
that purchasers A and B are supposed to purchase PC 
cards in which the same key, Ka, for making a secret 
key is set, and purchaser C is supposed to purchase a 
PC card in which the key, Kb, for making a secret key is 
set. 

[0037] Next, all the purchasers A, B and C purchase 
said right from the seller who sells the right to use cipher 
communications in step 2). Then, they set said right for 
the PC cards. Or, they can have said right set in the PC 
cards, when purchasing said right. Purchaser A informs 
non-purchaser D off-line of said right 11 and the ID 
number 1 in step 3) so that purchaser A can perform 
cipher communications, first of all, with non-purchaser 
D. Non-purchaser D who has received said right and the 
ID 1 in steps 4) and 5) accesses the distributor of the 
software (contents) using said right and downloads the 
dedicated software in which the key, Ka, for making a 
secret key is included. Then, non-purchaser D makes 
the cipher key Ka 1 by inputting the ID 1 in this dedicated 
software. In this way purchaser A can perform cipher 
communications with non-purchaser D, as shown in 
step 6). 

[0038] In step 7), purchaser A sends the ID 1 that is 
sent to non-purchaser D to purchasers B and C. Since 
the dedicated software for cipher communications that 
includes Ka as the key for making a secret key has been 
distributed to purchaser B, purchaser B can perform ci- 
pher communications with non-purchaser D using ID1 
and Ka, as in step 8). But if the purchaser C has a piece 
of dedicated ciphering software in which a secret key 
generation key Kb is set, then he cannot generate a ci- 
phering key to perform cipher communications with non- 
purchaser D, thereby he cannot perform cipher commu- 
nications with n on -purchaser D, as in step 9). 
[0039] As a method of making a cipher key from an 
ID and a key for making a secret key, for instance, the 
method explained in Fig.4 can be used. Furthermore, in 
addition to the embodiment described in Fig. 4 and Fig. 
5, two persons who communicate with each other can 
also establish a cipher key themselves to communicate 
with each other without allowing the dedicated software 
for cipher communications to have a key suitable for 
said right. 

[0040] Fig. 6 is a diagram showing the method for us- 
ing software for signature and certification. 
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[0041 J First, purchaser A purchases a hardware mod- 
ule including a PC card from the seller who sells and 
manages PC cards in step 1 ). The seller who sells and 
manages PC cards manages the purchasers of PC 
cards using the user management database 10. Next, 
purchaser A purchases the rights to use the software for 
signature and certification from the seller who sells said 
rights in step 2). Then, purchaser A informs non-pur- 
chaser D off-line of one of said rights that purchaser A 
has purchased in step 3). Non-purchaser D accesses 
the distributor of the software using said rights in step 
4), and downloads the dedicated software for signature 
and certification in step 5). Thus, a file with a signature 
that prevents alteration of an attached file can be com- 
municated between purchaser A and non-purchaser D 
in step 6). 

[0042] Fig. 7 is a diagram showing the method for dis- 
tributing software for competition games. 
[0043] First, purchaser A purchases a PC card that 
incorporates competition -game software from the seller 
who sells and manages PC cards in step 1 ). Purchaser 
A purchases the right to use the competition-game soft- 
ware from the seller who sell said rights in step 2), and 
sets a cipher key suitable for said right in the PC card. 
When purchaser A wants to play the game only with the 
non-purchaser D, purchaser A informs non-purchaser 
D off-line of one of said rights in step 3). Non-purchaser 
D accesses the distributor of the dedicated software for 
the competition game using said right of which purchas- 
er A has informed non-purchaser D, and downloads the 
dedicated software for the competition game that has a 
cipher key suitable for said right in steps 4) and 5). Then, 
purchaser A and non-purchaser D can play the game 
using cipher communications performed by a cipher key 
common to both parties, as shown in step 6). 
[0044] If this method is used, one can play a compe- 
tition game with a specified person without having any- 
one else view the contents of the competition game. 
[0045] Fig. 8 to Fig. 10 are diagrams showing the 
processing sequence of the mode for implementing the 
invention and access to a database. 
[0046] When a purchaser pays the seller who sells 
and manages PC cards, and purchases a hardware 
module in step (1), the purchaser registers the following 
information in the user management database: 

• The name of the purchaser, the ID of the purchaser 
and information about other purchasers 

• The kind and type of a hardware module and other 
information about the production of a hardware 
module 

• The number of times a retrieval induction code is 
utilized, amount of money for utilization and infor- 
mation about other utilization 

• The maximum value of a retrieval induction code 
that can be set, and information about the limit of 
utilization 



[0047] The seller who sells and manages PC cards 
provides the purchaser with a hardware module (includ- 
ing a PC card) in step (2) based upon the above data. 
Next, the purchaser purchases said right for use N times 
5 in step (3) . At that time, the seller who sells said right 
accesses the user management database 10 to certify 
the purchaser, registers the quantity of a retrieval induc- 
tion code sold and amount of money paid in the user 
management database 1 0, and sets the retrieval indue- 
io tion code, the key for making a secret key used for en- 
crypting and decrypting and the state of the retrieval in- 
duction code (to be set to "unused") in the user man- 
agement database 1 0, and issues the retrieval induction 
code and the key for making a secret key used for en- 
's crypting and decrypting. The purchaser sets the retriev- 
al induction code and the key for making a secret key 
used for encrypting and decryting in the hardware mod- 
ule, and obtains said right for use N times (4). 
[0048] In (5), said purchaser provides a non-p unchas- 
te er with said right for use one time, and then the non- 
purchaser uses said right for use one time for the dis- 
tributor of the software in (6). Then, the software distrib- 
utor makes the dedicated software. At that time, the soft- 
ware distributor accesses the user management data- 

25 base 10 to confirm the retrieval induction code, obtains 
the key for making a secret key used for enciphering 
and decrypting from the user management database 1 0, 
registers the retrieval induction code as "in use" in the 
user management database 1 0, and distributes the ded- 

30 icated software for use one time to a user who has not 
purchased a PC card in step (7). Since the software dis- 
tributor has distributed the dedicated software, the state 
of the retrieval code in the user management database 
1 0 is set to "already used." 

35 [0049] A user who has purchased a PC card and a 
user who has not purchased a PC card perform cipher 
communications in step(8). When the seller who sells 
and manages PC cards returns a profit to the purchaser, 
the seller calculates the pay-back amount in step (9). At 

40 that time the seller obtains the ID of the purchaser, the 
state of the retrieval induction code, the quantity of the 
retrieval induction code purchased and the amount of 
money paid using the user management database 10. 
Then, the seller calculates the amount to be returned 

45 and the utilization points, and registers these in the user 
management database 10. When the seller actually re- 
turns a prof it to the purchaser, the seller returns the profit 
to the purchaser based upon the ID of the purchaser, 
the amount to be returned and the utilization points 

so which are obtained from the user management data- 
base. 

[0050] Fig. 11 is a diagram showing the sequence in 
which a user purchases a hardware module from the 
seller who sells and manages PC cards. Auser who 
55 wants to purchase a PC card informs the seller who sells 
and manages PC cards and the seller who sells the right 
to use cipher communications that he wants to purchase 
a PC card. Then, both the sellers issue the PC card, set 
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an individual key, and register a key fit to the retrieval 
induction code in the PC card. An individual key is pe- 
culiar to each individual PC card, and it is managed by 
the seller who sells and manages PC cards. The indi- 
vidual key is used when a user who has purchased a 5 
PC card wants to communicate with the seller who sells 
and manages PC cards, or when a user who has pur- 
chased a PC card wants to have said seller send a se- 
cret key used for two purchasers to perform cipher com- 
munications with each other, the individual key is used 10 
to encrypt the secret key. Suppose that a user A and a 
user B are purchasers who have purchased PC cards, 
an individual key K1 is set to purchaser A, and an indi- 
vidual key K2 is set to purchaser B, and a key K3 is used 
for purchaser A to perform cipher communications with is 
purchaser B. The keys that are made by encrypting the 
key K3 with the individual keys K1 and K2 are sent to 
purchaser A, and purchaser A transfers the key that is 
made by encrypting the key K3 with the individual key 
K2 to purchaser B, and purchaser A deciphers the key 20 
encrypted with the individual key K1 . Purchaser B deci- 
phers the key K3 with the individual key K2 and obtains 
the key K3. In this way purchaser A and purchaser B 
can perform cipher communications using the key K3. 
In addition, the individual keys are also used, for in- 25 
stance, for the seller who sells and manages PC cards 
to send information about a pay-back amount to the pur- 
chasers. 

[0051] The seller who sells and manages PC cards 
issues a PC card in step (2) and registers the purchaser 30 
information, the retrieval induction code and the key fit 
to the retrieval induction code in the database in step 
(3). Then, said seller attaches a seal in which retrieval 
induction codes are listed to the PC and distributes the 
seal to the purchaser in step (4). 35 
[0052] Fig. 12 and Fig. 13 are diagrams showing the 
procedure for starting communications. 
[0053] First, a purchaser informs a non-purchaser 1 
that he wants to perform cipher communications with the 
non-purchaser in step (1). Then, he accesses the 40 
homepage using a specially set URL, downloads cipher 
software, for instance, using a retrieval induction code 
1 , and informs the non-purchaser 1 off-line of the retriev- 
al induction code. The non-purchaser 1 who has re- 
ceived the name of the purchaser who has purchased 45 
a PC card, the URL and the retrieval induction code 
opens the homepage of the distributor of the software, 
inputs the retrieval induction code 1 , and downloads the 
cipher software in which he is interested in step (2). 
[0054] In step (2), the distributor of cipher software so 
prepares the cipher software that sets a dedicated se- 
cret key from the value of said retrieval induction code 
1 , and said distributor updates the state of the retrieval 
induction code by retrieving the user management da- 
tabase 1 0 in step (4). Then, in step (5), a non-purchaser 55 
1 downloads the cipher software in which the dedicated 
secret key is included and installs ft in his own machine. 
In step (6), he performs cipher communications that use 



the dedicated secret key with a purchaser who has pur- 
chased a PC card using this cipher software. In step (7), 
when the cipher communications stopped, the used re- 
trieval induction code becomes unusable in accordance 
with the limiting conditions. 

[0055] Fig. 1 3 is a diagram showing the procedure for 
a purchaser to perform for the second time cipher com- 
munications with a non-purchaser. Apurchaser informs 
a non-purchaser 2 that he wants to perform cipher com- 
munications with the non-purchaser in step (1). Then, 
the purchaser opens the homepage using a specialty 
set URL, downloads cipher software using a retrieval in- 
duction code 2, and informs the non-purchaser 2 off-line 
of the retrieval induction code. When the non-purchaser 
2 obtains the name of the purchaser, the URL and the 
retrieval induction code, he opens the homepage of the 
distributor of the software, inputs the value of the retriev- 
al induction code 2 and gives instructions for download- 
ing the cipher software he wants to download at in step 
(2). In step (3), the distributor of cipher software pre- 
pares the cipher software that sets a dedicated secret 
key from the value of said retrieval induction code 2, said 
distributor updates the state of the retrieval induction 
code in the user management database 1 0 in step (4). 
Then, in step (5), the non-purchaser 1 downloads the 
cipher software in which the dedicated secret key is in- 
cluded, and he performs secret communications (cipher 
communications) with a purchaser in step (6). In step 
(7), when the cipher communications stopped, the used 
retrieval induction code becomes unusable in accord- 
ance with the limiting conditions, as shown in step (7). 
[0056] Fig. 1 4 is a diagram showing the procedure for 
supplementing a retrieval induction code. 
[0057] A purchaser informs a seller who sells and 
manages PC cards that he wants to additionally pur- 
chase a retrieval induction code in step (1). The seller 
who sells and manages PC cards confirms the identity 
of the purchaser in step (2), and adds (charges) a re- 
trieval induction code to the PC card. As the charging 
method, there is, for example, a method in which the 
purchaser brings the PC card to the seller and has the 
seller charge the PC card, or a method of charging the 
PC card on-line on a network. When the seller has fin- 
ished charging the PC card, the seller registers the pur- 
chaser information, the retrieval induction code and the 
key in the database in step (3) and the PC card is re- 
turned to the purchaser. At that time, payment for the 
additional purchase of the retrieval induction code is re- 
quested to the purchaser in step (4). 
[0058] Fig. 15 is a diagram showing the certification 
process at the time a purchaser transmits data to a non- 
purchaser. 

[0059] Purchaser A sets a secret key for the retrieval 
induction code handed over to a non-purchaser and en- 
crypts data in step (1 ). As an example of constructing 
an interface, it is possible to construct an interface in 
such a way that a secret key is set when a retrieval in- 
duction code is designated on an application display 
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window. 

[0060] Non-purchaser B Is informed of the encrypted 
data in step (2). Header information is added to the en- 
crypted data. Not only general information about the en- 
cryption but also information to the effect that a PC card 
has been encrypted are entered in the header. Non-pur- 
chaser B starts the software to communicate with pur- 
chaser A in step (3), and in step (4), non-purchaser B 
checks the header of the cipher header received from 
purchaser A. The following items in the header contents 
are to be checked: whether the header is from the pur- 
chaser (step (1 )), and whether the cipher is the one ob- 
tained by a PC card (step (2)). Then, if the header infor- 
mation is correct in step (5), the non-purchaser decrypts 
the encrypted data and obtains ordinary data. 
[0061] Fig. 16 is a diagram showing the certification 
process at the time a non-purchaser transmits data to a 
purchaser. First, non-purchaser B starts the software to 
communicate with purchaser A in step (1), and in step 
(2) he selects data to be transmitted, and encrypts the 
data using the secret key incorporated in the software 
that has been started in step (1) and transmits the en- 
crypted data in step (3). Here, header information is add- 
ed to the encrypted data. Not only general information 
about the encryption but also information to the effect 
that limited software has been encrypted are entered in 
the header. 

[0062] The purchaser sets the secret key for the re- 
trieval induction code transferred to the non-purchaser 
in step (4). An interface can be constructed in such a 
way that when a retrieval induction code is designated 
on a application window, the secret key is automatically 
set. In step (5), the purchaser checks the header and 
confirms the header information. If the header informa- 
tion is correct, the purchaser deciphers the encrypted 
data. 

[0063] Fig. 17 is a diagram showing the certification 
process at the time non-purchaser C transmits data to 
non-purchaser B. 

[0064] Non-purchaser C starts the software to com- 
municate with non-purchaser B in step (1). Since non- 
purchaser C does not have software for non-purchaser 
B, non-purchaser C obtains, for example, copied soft- 
ware from non-purchaser B and starts the copied soft- 
ware. Then, non-purchaser C transmits the encrypted 
data to non-purchaser B in step (2). Header information 
is added to the encrypted data. Not only general infor- 
mation about the encryption but also information to the 
effect that a limited software has been encrypted are en- 
tered in the header. On the other hand, non-purchaser 
B starts certain software in step (3). When non-purchas- 
er B receives the encrypted data from non-purchaser C, 
non-purchaser B checks the header in step (4), checks 
that the encrypted data is from a purchaser who has pur- 
chased a PC card 1), and checks that the cipher has 
been obtained by a PC card 2). In step (5), however, 
since the header is not correct, the cipher can neither 
be decrypted, nor can it be certified. 



[0065] In this way, encrypted data to be used for ci- 
pher communications can be certified if it is used for the 
communications with a purchaser, but it cannot be cer- 
tified if it is used for communications between a non- 
5 purchaser and a non-purchaser. 

[0066] Fig. 18 is a diagram showing the certification 
process at the time communications are performed be- 
tween both parties who have purchased PC cards. 
[0067] First, purchaser A sets a secret key for the re- 
10 trieval induction code (or ID) that has been determined 
with purchaser D in step (1 ), and thereby encrypts data. 
At that time; an interface can be constructed in such a 
way that when a retrieval induction code (ID) is desig- 
nated in a application window, the secret key is auto-. 

15 matically set. 

[0068] Once the secret key is set, purchaser A en- 
crypts the data and transmits the encrypted data, as 
shown in step (2). Header information is added to the 
encrypted data. Not only general information about the 

20 encryption but also information to the effect that a PC 
card has been encrypted are entered in the header. 
[0069] Purchaser D sets a secret key for the retrieval 
induction code (or ID) that has been determined with 
purchaser A in step (3). At that time, when a retrieval 

25 induction code (or ID) is designated on a application win- 
dow, the secret key is automatically set. When purchas- 
er D receives the encrypted data, purchaser D checks 
the header and checks the header information in step 
(4). 

30 [0070] If the header information is correct, he decrypts 
the encrypted data and obtains ordinary data in step (5). 
[0071 ] Fig. 1 9 is a diagram showing a summary of the 
certification of encrypted data. 

[0072] In (1) and (4), since non-purchaser B has the 
35 dedicated software of purchaser A, the encrypted data 
can be certified. 

[0073] In (2), purchaser A transmits the encrypted da- 
ta to non-purchaser C by mistake, but the encrypted da- 
ta can be certified underthe condition that non-purchas- 

40 er C has the dedicated software of purchaser A. In (5) 
and (10), since purchaser A and non-purchaser C have 
the cipher software, the encrypted data can be certified 
by using the retrieval induction code that has been de- 
term in edbybothparties. In (5) and (8), the dedicated 

45 software cannot decipher the encrypted data of the ded- 
icated software. In (6) and (9), since the secret key of 
the transmitted data is unknown, certification of the en- 
crypted data is impossible. However, if purchaser D 
knows the retrieval induction code (ID) of purchaser A 

50 and the method of making a secret key is the same, cer- 
tification of the encrypted data is possible. The fact that 
the method of making a secret key is the same covers 
the case where a secret key is made using a value that 
purchaser A and purchaser D have in common. 

55 [0074] In (7), since non-purchaser C has the dedicat- 
ed software of purchaser A, the encrypted data can be 
certified. However, since the secret key for the transmit- 
ted data is from a purchaser who is different from non- 
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purchaser B whom purchaser A informed of the retrieval 
induction code, whetherthe encrypted data is decrypted 
depends upon whether purchaser A can obtain the 
same retrieval induction code that non-purchaser C us- 
es. 

[0075] In (11) and (12), since there is no dedicated 
software for purchaser D, the encrypted data cannot be 
certified. 

[0076] Fig. 20 to Fig. 25 are diagrams showing the 
method for making and using a secret key. 
[0077] Examples of having a pair of retrieval induction 
codes and secret keys are shown in these figures. When 
two persons who communicate with each other deter- 
mine a key to be used for cipher communications, the 
following process is not necessary, provided, however, 
that when they mutually determine an ID and mutually 
make a secret key, the key for making a secret key, 
which is explained below, has to have the same value. 
[0078] First, a method of making a secret key is ex- 
plained. A secret key is made by the seller who sells and 
manages PC cards, as described in Fig. 20. The secret 
key can also be made in a hardware module. 
[0079] When a purchaser of a hardware module 
makes a request to purchase the right to use cipher 
communications, a secret key is made by the seller who 
sells and manages PC cards. The secret key that has 
been made is related to a retrieval induction code. The 
retrieval induction code is made, for instance, using an 
absolute time so that the same value does not result. 
After the retrieval induction code and the secret key are 
stored in the user management database 10, they are 
set in the hardware module. 

[0080] Fig. 21 is a diagram showing the method in 
which a purchaser and a non-purchaser use the embod- 
iment of the present invention. 

[0081] Cipher software is added to the dedicated soft- 
ware that has been downloaded by a non-purchaser. 
When a purchaser sets a retrieval induction code that 
has been transferred to the non-purchaser, a cipher key 
is automatically set. 

[0082] Fig. 22 is a diagram showing the method of 
making and using a secret key that is used by a pur- 
chaser and a non-purchaser. 

[0083] The secret key is made in a hardware module. 
The secret key that is used between a purchaser of a 
hardware module and another purchaser of a hardware 
module is made in the hardware module of each pur- 
chaser. When a retrieval induction code (ID) that has 
been determined by both purchasers is inputted, the se- 
cret key is made by encrypting the retrieval induction 
code using the key for making a secret key. At that time, 
the key for making a cipher in each hardware module 
must be the same for both purchasers. 
[0084] Fig. 23 is a diagram showing the method in 
which a plurality of purchasers and a non-purchaser 
make and use a secret key. 

[0085] When a purchaser of a hardware module 
makes a request to purchase the right to use a hardware 



module, a secret key is made by the seller who sells and 
manages PC cards . At that time, the purchaser re- 
quests said seller to make a secret key by way of the 
method of making a secret key in the hardware module. 

5 The key for making a cipher is stored in the database 
when the purchaser purchases the hardware module. 
The secret key is made using the value made as a re- 
trieval induction code as the ID. 
[0086] When the purchaser who has transferred a re- 

10 trieval induction code (or ID) to a non-purchaser sets the 
retrieval induction code (or ID) that he transferred to the 
non-purchaser, a secret key is automatically set, as 
shown in Fig. 24. The method of making a secret key is 
obtained by encrypting the retrieval induction code (or 

15 ID) using the key for making the secret key, as men- 
tioned above. 

[0087] A purchaser who has not transferred the re- 
trieval induction code (ID) to a non-purchaser has a pur- 
chaser who has transferred the retrieval induction code 
20 (ID) to a non-purchaser inform him of the ID. When the 
ID is inputted, the secret key is made. In this case, the 
key for making a cipher in the hardware module must 
be the same. 

[0088] When downloading the dedicated software for 
25 cipher communications, the non-purchaser visits the 
web address of the other party whose software is down- 
loaded based upon the URL of which the purchaser has 
informed the non-purchaser, and inputs the retrieval in- 
duction code. If the code is judged to be correct, the non- 
30 purchaser can download the dedicated software and be- 
gins downloading the dedicated software. Once the 
dedicated software has been downloaded, it cannot be 
downloaded again using the same retrieval induction 
code. Different dedicated software in which a different 
35 secret key is set can be downloaded only with a different 
retrieval induction code, so that once one piece of ded- 
icated software has been downloaded, it cannot be 
downloaded again unless the right to copy it is estab- 
lished. 

40 [0089] When charging a retrieval induction code to a 
PC card, a purchaser requests the seller who sells and 
manages PC cards to charge a retrieval induction code. 
When the code is charged to the PC card, a cipher key 
(or an ID) and the code are set in the PC card. There 

45 are two methods for charging: a purchaser brings a PC 
card to the seller and has the seller charge the code to 
the PC card, or a purchaser asks the seller to charge 
the code to the PC card on the WEB. In charging the 
code, a purchaser has to have his PC card certified. Af- 

50 ter his card is certificated, he designates the quantity of 
charge and charges the designated code to the PC card 
by the designated quantity. The purchaser is requested 
to pay for the charging of the code by the designated 
quantity. 

55 [0090] A PC card has the function of encrypting and 
decrypting, as well as of verifying a signature. An indi- 
vidual key which cannot be changed and which is one 
secret key stored in a PC card, and a cipher key which 
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is used for cipher communications with a unspecified 
party and for which a multiple number can be set are set 
in a PC card. 

[0091] Fig. 26 is a flowchart showing the processing 
sequence at the time when a non-purchaser downloads 
dedicated software. 

[0092] First, a non-purchaser inputs the URL and re- 
trieval induction code from his terminal unit. Next, he 
opens the homepage to download the dedicated soft- 
ware using the URL in step S1 . When such instructions 
indicating that a retrieval induction code be inputted ap- 
pear on the display screen in step S2, he inputs the re- 
trieval induction code. In step S3, the seller who sells 
and manages PC cards judges whether the inputted re- 
trieval induction code is correct. If the code is not cor- 
rect, an error appears on the display screen in step S4, 
and the downloading process terminates . If the code is 
judged to be correct in step S3, such instructions indi- 
cating that the dedicated software be downloaded ap- 
pear on the display screen in step S5. In step S6, he 
begins downloading the dedicated software. When he 
has finished downloading the dedicated software, the 
downloading process terminates. 
[0093] Fig. 27 is a flowchart showing the process in 
which a purchaser charges a retrieval induction code to 
a PC card. 

[0094] First, a purchaser brings a PC card to the seller 
of PC cards in step S1 0, and asks the seller to charge 
a retrieval induction code to a PC card or asks said seller 
to charge a retrieval induction code to a PC card at a 
web address . In step S11, the purchaser has a hard- 
ware module (a PC card) certified. If he fails in the cer- 
tification, an error appears on the display screen in step 
S13. If he succeeds in the certification in step S11 , var- 
ious kinds of information are set in the PC card in step 
S12,andthecharging process terminates. The contents 
of the charging process are the actual charging quantity 
against a desired charging quantity, the retrieval induc- 
tion code, the key, the amount of money to be paid for 
charging, and these contents are managed by the seller 
who sells and manages PC cards, and a cipher key is 
additionally set in the PC card. 
[0095] This invention makes it possible to use secret 
and common software only with a specified party and to 
promote the use of software by performing communica- 
tions via a network having enhanced secrecy. 
[0096] If this invention is applied particularly to distrib- 
uting a secret key for cipher communications, it is pos- 
sible to perform secret communications safely with a 
specified party. 
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distributing said software together with at least 
a code to identify said software with the first us- 
er; and 

distributing to the second user the same soft- 
ware as said software identified by the code of 
which the first user has informed the second us- 
er. 

2. The method according claim 1 , wherein 

the first user has to pay a reward in return for 
the distribution right of said software. 



15 3. 



20 



The method according claim 1 or 2, wherein 

said software is the software for cipher com- 
munications. 

The method according claim 3, wherein said code 
is used to make a secret key for cipher communi- 
cations. 



5. The method according claim 3, wherein 

a secret key that is identified by said code is 
25 set in said software that the second user obtains. 

6. The method according to any of the preceding 
claims, wherein 

said software is software for a competition 
30 game. 

7. The method according to any of the preceding 
claims, wherein 

a plurality of said codes is distributed to the 
35 first user, and each code can be used only once. 

8. The method according to claim 7, wherein 

said code can additionally be distributed to the 
first user, and the first user has to pay for the addi- 
40 tional purchase. 

9. The method according to any of the preceding 
claims, wherein 

the first user obtains said software by storing 
45 rt in a PC card. 

10. The method according to any of the preceding 
claims, wherein 

the first user informs the second user off-line 
50 of said code. 



11. The method according to any of the preceding 
Claims claims, wherein 

the second user obtains software on-line. 

1. A method in which a first user to whom a right to 55 

use a piece of software is granted distributes the 12. The method according to any of claims 1 to 10, 
software required for processing to a second user wherein 

who processes the software, comprising the steps the second user obtains said software off-line. 
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13. The method according to claim 2, or any of claims 
3 to 12 as dependent on claim 2, wherein 

the first user receives a reward by satisfying 
a plurality of specified conditions. 

5 

14. The method according to any of the preceding 
claims, wherein 

when the second user communicates with a 
third user that is different from the first user, the sec- 
ond user receives said code from the first user, and 10 
sets a right to copy said software when obtaining 
said software, and transfers said copying right to the 
third user so that the third user can obtain the same 
software as said software, and the second user and 
the third user can communicate using said soft- w 
ware. 



15. The method according to any of claims 1 to 13, 
wherein 

when the second user communicates with a 20 
third user that is different from the first user, the third 
user obtains the same kind of software as the first 
user; the first user and the third user can communi- 
cate with each other by obtaining said code from 
the first user; the first user informs the second user 25 
of said code so that the second user can download 
the software required for the communications and 
the first, second and third users can communicate 
with one another. 

30 

16. The method according to claim 15, wherein 

the same kind of software owned by the third 
user as the software of the first user is the software 
for cipher communications that makes the same se- 
cret key using the same code. 35 

17. The method according to claim 15, wherein 

the first user arbitrarily sets an ID for said 
code, and the second user uses said ID instead of 
said code. 40 



18. A computer program for carrying out a method ac- 
cording to any of the preceding claims. 



45 
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INPUTTING RETRIEVAL INDUCTION CODE 



SECRET KEY 



FIG. 2 1 



32 



EP1 191 420 A2 



KEY FOR MAKING A SECRET KEY 



INPUTTING ID 



ENCRYPTING 



SECRET KEY 



FIG. 2 2 
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FIG. 2 4 
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FIG. 2 5 
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(^METHOD FOR DOWNLOADING^) 



1 1 n : URL, RETR I EVAL I NDUCT I ON CODE 



NON-PURCHASER INPUTS URL AND OPENS 
THE HOMEPAGE TO DOWNLOAD DEDICATED 
SOFTWARE 



SI 



WHEN INSTRUCTING THAT THE RETRIEVAL 
INDUCTION CODE BE INPUTTED APPEAR ON 
DISPLAY SCREEN, A NON-PURCHASER 
INPUTS RETRIEVAL INDUCTION CODE 



S2 




NO 



INSTRUCTIONS INDICATING THAT 
THE DEDICATED SOFTWARE BE 
DOWNLOADED APPEAR ON DISPLAY 
SCREEN 



S5 



ERROR 



NON-PURCHASER BEGINS 
DOWNLOADING DEDICATED 
SOFTWARE 



S6 



(^DOWNLOADING PROCESS TERMINATES^) 



FIG. 2 6 
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METHOD FOR CHARGING ^) 



PURCHASER BRINGS PC CARD TO SELLER 
AND REQUESTS SELLER TO CHARGE 
RETRIEVAL INDUCTION CODE TO PC 
CARD. OR REQUESTS SAID SELLER TO 
CHARGE RETRIEVAL INDUCTION CODE TO 
PC CARD ON THE WEB 



S10 



In : DESIRED CHARGING QUANTITY 

Out : ACTUAL CHARGING QUANTITY 
RETRIEVAL INDUCTION CODE 
KEY 

AMOUNT OF MONEY REQUIRED 
FOR CHARGING 

PROCESSING : CIPHER KEY IS 
ADDITIONALLY SET 
IN PC CARD 




PURCHASER REQUESTS 
SELLER TO CHARGE 
RETRIEVAL INDUCTION 
CODE. AND SELLER SETS 
VARIOUS KINDS OF 
INFORMATION IN PC 
CARD 
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(^CHARGING PROCESS TERMINATES^ 



FIG. 2 7 



38 



DOCUMENT-IDENTIFIER: EP 1 191420 A2 



PUB-NO: EP001 191420A2 

DOCUMENT-IDENTIFIER: EP 1 191420 A2 
TITLE: Method of distributing software 

PUBN-DATE: March 27, 2002 

INVENTOR-INFORMATION: 
NAME COUNTRY 
SASAKI, TAKAOKI JP 
KANOU, RYOHEI JP 
AKIYAMA, RYOTA JP 

ASSIGNEE-INFORMATION: 

NAME COUNTRY 
FUJITSU LTD JP 

APPL-NO: EP01 302368 
APPL-DATE: March 14, 2001 

PRIORITY-DATA: JP2000285770 A (September 20, 2000) 
INT-CL(IPC): G06F001/00 

EUR-CL (EPC): G06F001/00 , G06F021/00 , G06F021/00 
ABSTRACT: 

CHG DATE=20020503 STATUS=0> One of a plurality of users 
purchases a PC card in which software is included from a distributor of 
communication software or a seller of PC cards. This purchaser informs a 

file:///CI/E>ocuments%20and%20Settings^ (1 of 2)12/15/08 7:13:17 PM 



DOCUMENT-IDENTIFIER: EP 1191420 A2 



non-purchaser through a safe channel such as off-line of a key for 
encryption, a URL of the site from which to download the software and a 
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